KYC / AML Policy
Effective date: [INSERT DATE] · Last updated: April 2026
Why We Collect Identity Documents
The Ark collects identity verification documents to:
- —Unlock access to Tier 2 property content (full document set, CAD viewer)
- —Verify eligibility to participate in reservation and transaction flows (Milestone 3)
- —Comply with applicable anti-money laundering obligations
- —Protect all users and the platform from fraudulent activity
What We Collect
| Document | Purpose | Required for |
|---|---|---|
| Government-issued photo ID (passport, national ID) | Identity confirmation | Tier 2 content access |
| Proof of address (utility bill, bank statement < 90 days) | Address confirmation | Transaction flow (Milestone 3) |
| Selfie / liveness check | Match ID to applicant | Transaction flow (Milestone 3) |
How We Store It
- —Identity documents are stored in a private Supabase Storage bucket — no public URL
- —Access is via signed URLs only, expiring after [X minutes]
- —Documents are encrypted at rest in Supabase's managed infrastructure
- —Access is restricted to platform administrators for review purposes only
- —Documents are never shared with third parties except where legally required
Review Process
Current MVP process (manual review):
- —User uploads document via the KYC form
- —Admin receives notification by email
- —Admin reviews document in Supabase Storage (admin-only signed URL)
- —Admin approves or rejects the submission
- —User receives email confirming status
Data Retention
KYC documents are retained for [X years per applicable regulatory requirement — to be confirmed with Argentine and US counsel]. After the retention period, documents are deleted and kyc_status is updated to "expired".
Your Rights
You may request deletion of your KYC documents at any time by emailing legal@theark.ink. Deletion may result in loss of Tier 2 access until re-verification. Regulatory retention requirements may prevent immediate deletion.
What We Are Not
The Ark is not a financial institution, money transmitter, or securities dealer. Our KYC process is for identity verification and does not constitute regulated financial KYC/AML compliance as required of banks or broker-dealers. If Argentine law (UIAF) imposes specific obligations on platforms like ours, this policy will be updated accordingly.
Contact
KYC questions: legal@theark.ink